Static task
static1
Behavioral task
behavioral1
Sample
f457e5bf42cab1972ff3b83dceba3bf770d924cd44983e66f1164af0a02a68e7.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f457e5bf42cab1972ff3b83dceba3bf770d924cd44983e66f1164af0a02a68e7.exe
Resource
win10v2004-20240226-en
General
-
Target
f457e5bf42cab1972ff3b83dceba3bf770d924cd44983e66f1164af0a02a68e7
-
Size
359KB
-
MD5
3d8387165f598a91bed3e01226eeb361
-
SHA1
734a62f0a6857685948e103371141ab0ea671a88
-
SHA256
f457e5bf42cab1972ff3b83dceba3bf770d924cd44983e66f1164af0a02a68e7
-
SHA512
82586f6f0a7aa698e6528967a1b6063e25cb71fb4b3f00fbc404df8ce23e7a858494e718e1ed61837b2c8059b2e3272eba271a3524b78c1ed227f65e7d02d4c3
-
SSDEEP
6144:8GAnVFGQrkX66k7RT42dhRF7JcaDUmPnSF+jwqw5G9Zo8EytGN5kSll:V4Gj1wlLRFl5UAn1q44Io
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f457e5bf42cab1972ff3b83dceba3bf770d924cd44983e66f1164af0a02a68e7
Files
-
f457e5bf42cab1972ff3b83dceba3bf770d924cd44983e66f1164af0a02a68e7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 345KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ